Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/33494705E93212BFD28AEA719521AE8BF6684199.cer
File:                     33494705E93212BFD28AEA719521AE8BF6684199.cer (raw, json)
Hash identifier:          x2wzMleHDfYFPrbLu3diMRLTm3rsFUO/TUcVeDK90dA=
Subject key identifier:   33:49:47:05:E9:32:12:BF:D2:8A:EA:71:95:21:AE:8B:F6:68:41:99
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6236AAB74E583929925CBD5F7C1E1E56A03C1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/1/33494705E93212BFD28AEA719521AE8BF6684199.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 30 Aug 2023 13:43:32 +0000
Certificate not after:    Wed 28 Aug 2024 13:48:32 +0000
Subordinate resources:    AS: 266072
                          IP: 45.4.140.0/22
                          IP: 2804:3a20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:36:aa:b7:4e:58:39:29:92:5c:bd:5f:7c:1e:1e:56:a0:3c:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 30 13:43:32 2023 GMT
            Not After : Aug 28 13:48:32 2024 GMT
        Subject: CN=33494705E93212BFD28AEA719521AE8BF6684199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:90:2e:a1:16:49:72:c3:fa:aa:e5:01:9b:64:
                    76:2f:04:2e:b9:04:10:03:9c:32:35:38:4f:89:a3:
                    cd:b1:84:bf:db:fe:e8:a6:f8:90:1e:a6:47:40:37:
                    d7:7f:33:f1:a0:a0:49:ee:ea:d9:c4:60:26:cc:83:
                    b7:cd:1f:99:85:a0:e8:ae:86:c9:41:3a:0c:e7:34:
                    97:6f:8d:b7:b2:1e:fe:3a:40:49:23:f5:d0:db:36:
                    a1:e1:c2:d8:5d:0e:53:39:d0:63:68:5e:37:5d:91:
                    dc:ea:e3:b2:25:f1:20:d9:0a:8f:b0:df:ca:f0:2c:
                    7c:b3:af:28:15:71:0c:5a:a5:21:b6:2a:6b:2b:2c:
                    db:77:03:74:00:85:aa:95:e2:83:3f:a0:aa:62:40:
                    ed:36:83:36:b0:55:05:13:e9:d9:cd:b4:cc:7b:75:
                    e6:57:63:9c:79:10:5f:1d:5c:8a:a5:c6:76:aa:1b:
                    3e:3a:b9:6d:d5:63:31:88:c9:d5:f3:b0:d8:19:75:
                    b2:00:1a:cd:78:c9:63:25:42:e4:76:34:4c:0a:3e:
                    63:d9:74:6f:7d:68:0b:3e:74:10:52:92:20:6e:be:
                    66:b2:e0:03:ba:52:e8:59:ff:a0:b2:ac:b4:fd:39:
                    88:c2:de:40:1c:38:01:86:57:26:e0:e9:ac:80:d4:
                    58:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:49:47:05:E9:32:12:BF:D2:8A:EA:71:95:21:AE:8B:F6:68:41:99
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/1/33494705E93212BFD28AEA719521AE8BF6684199.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.140.0/22
                IPv6:
                  2804:3a20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266072

    Signature Algorithm: sha256WithRSAEncryption
         54:50:19:59:8f:51:65:84:95:8e:8b:3d:6e:d8:df:d5:ce:8a:
         06:7c:8a:7f:9a:a0:1f:43:f7:5c:fd:6d:a7:66:9f:20:fe:68:
         89:45:a4:b8:cc:87:e8:63:59:9c:77:20:c0:63:40:bb:87:ff:
         e3:0f:18:ae:70:6a:b3:24:84:61:72:26:df:78:3a:f8:8f:c3:
         63:7c:13:22:2a:db:c6:5d:00:0a:a7:80:29:bf:ab:6a:ae:0d:
         f1:cc:76:7c:e9:33:dc:1e:09:f5:11:67:fd:09:02:08:de:87:
         31:24:d5:bb:88:d1:d9:4c:b3:d7:82:b0:4b:3d:7b:ed:09:0f:
         47:ad:8e:f4:86:5c:cd:ca:4a:05:ab:cf:b1:c0:71:1d:79:c8:
         13:61:45:5b:3d:8a:7d:a8:91:6e:1c:bd:d7:95:cc:59:f4:e4:
         4b:ed:81:fb:92:75:43:4e:be:93:9f:d8:5f:6d:de:2f:25:91:
         97:1f:50:d1:25:20:6e:97:f0:d9:1b:04:a8:be:29:ac:14:9e:
         92:2d:b5:52:9b:f9:73:53:80:40:58:2f:36:3e:da:c7:06:1b:
         e1:aa:16:35:ad:80:de:c8:3c:92:05:a4:6c:34:6e:3c:ff:a2:
         a8:c8:26:9a:e0:61:fd:f2:a1:39:09:b6:f3:03:91:06:ef:77:
         18:30:a9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org